WTF is THIS crap?!?!?

Discussion in 'Techforge' started by Forbin, Aug 2, 2007.

  1. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    All of a sudden I'm getting these giant square ad windows opening at random. No address bar to show me a URL, just the word "TARGETED" in the blue header bar.

    What the hell evil virus have I contracted now!?

    Oddly enough, this all started right after my last involuntary McAfee update and forced reboot. :mad:

    Anybody know what this shit is?
    • Agree Agree x 1
  2. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Guess I'm gonna try my first-ever System restore to an earlier date tonight.

    I think a thorough file backup is in order first.
  3. Reno Floyd

    Reno Floyd shameless bounder

    Joined:
    Apr 3, 2004
    Messages:
    3,423
    Location:
    UK
    Ratings:
    +336
    Your computer hates you.
  4. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    At last, a technical response! :lol:
    • Agree Agree x 1
  5. Cervantes

    Cervantes Fighting windmills

    Joined:
    Apr 18, 2004
    Messages:
    8,877
    Ratings:
    +1,746
    If it makes you feel any better, Forbin, in college I had a similar problem.

    This program, "Golden Palace Casino", kept popping up on my computer. I had no idea where it came from, and my every effort to get rid of it save for a system restore proved futile.

    ANd then one day I was using one of the computers in the dorm's comp lab for the free printer paper...and it popped up again!!!

    I just about cried.
  6. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    It opened just now when I opened this forum to check it. :bang:

    Could be worse - my 70-something Mom got a virus that permanently set her Explorer home page to a porn site, and any URL you typed in was rejected and rerouted to the porn site. She had to take the computer back to Staples for a full rebuild!
  7. Uncle Albert

    Uncle Albert Part beard. Part machine.

    Joined:
    Mar 29, 2004
    Messages:
    60,914
    Location:
    'twixt my nethers
    Ratings:
    +27,814
    It should be a capital crime to install shit on other people's computers without their consent.

    Short of that, purveyors of ad- and spyware should be forced to include their names and addresses in their downloads, so that we can visit them for a little chat.

    :spaceturk:
    • Agree Agree x 4
  8. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    System Restore to last Monday didn't do a fucking thing. :mad:

    This may take the Geek Squad!
  9. The Exception

    The Exception The One Who Will Be Administrator Super Moderator

    Joined:
    Apr 10, 2004
    Messages:
    21,942
    Ratings:
    +6,317
    Open up Task Manager and take a screenshot of your running processes, then post them here.
  10. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Thanks Nick.

    It actually seems to have stopped for the moment. MacAffee throws up a "cache overflow" warning once in a while with about the same timing those popups appeared.

    Had to do the processes window in two shots. Apparently I have a lot going on!
  11. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Seems to have stopped now, totally without perceptable reason.
    Gremlins?
  12. Kyle

    Kyle You will regret this!

    Joined:
    Mar 29, 2004
    Messages:
    9,150
    Location:
    California?!?!
    Ratings:
    +2,814
    Not necessarily. Sometimes spyware producers will send temporary kill commands to make you think you've solved the problem - that way, when it comes back, it'll catch you by surprise and you're more likely to fall for it again.

    By the way, what sort of stuff is showing up in the actual ad window itself? The other thing you can do is right-click on the page, then click Properties - that will often reveal a URL that you can use to search for solutions.
  13. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Ya know, I wasn't paying too close attention to WHAT it was, I was just so pissed it was happening, I kept closing it the instant it showed up. Some financial ads, I think.
  14. Grammour Boy

    Grammour Boy All The Children Are Insane!!

    Joined:
    Jul 17, 2006
    Messages:
    2,843
    Ratings:
    +256
    You probably have a trojan, Forbin. Some newer trojans are lodging themselves in the system restore folder, so doing a Sys Restore won't solve the problem. You'll need an antivirus and antispyware capable of scanning hidden files. Try AVG antivirus, it's very effective.

    And just because it's no longer popping up doesn't mean it's gone. The popups are probably happening on a timer. They'll be back unless you permanently remove the trojan.
  15. Megatron

    Megatron Banned

    Joined:
    Mar 30, 2004
    Messages:
    21,266
    Location:
    Cybertron
    Ratings:
    +105
    Forbin:

    Try AdAware.
    • Agree Agree x 1
  16. KamelReds

    KamelReds Bite the Curb!

    Joined:
    Jul 1, 2006
    Messages:
    1,666
    Ratings:
    +667
    Or SpyBot Search & Destroy.
  17. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Believe it or not McAfee just sent me an apology that one of their updates may have "caused problems," and sent me a new update.

    Not that it helped any, since an ad for "blackandsingle.com" just popped up a second ago. :jayzus:
  18. silvrdark

    silvrdark The Dumbest D&D Monster Ever

    Joined:
    Aug 5, 2007
    Messages:
    393
    Ratings:
    +234
    Definately sounds like you have a problem. It is time consuming, but you can start by googling each running proccess you do not recognize... sometimes you can find useful info, such as registry keys/files that need to be removed to disable the trojan. Often you will have to boot in safe mode to remove malicious files. The other alternative is to back up imortant files, then format and reinstall, making sure to virus scan those files before you put them back on your pc. Good luck...
  19. Sherlock Holmes

    Sherlock Holmes Resurrected

    Joined:
    Mar 28, 2004
    Messages:
    16,396
    Location:
    221b Baker Street
    Ratings:
    +978
    Try VundoFix. it worked when I was haveing a similar problem, and it turned out I had something like 30 some odd trojans that my adaware, spybot, and PC-cillin didn't catch.
  20. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Wouldya believe it didn't find anything?
    Thanks, though.
  21. Ward

    Ward A Stepford Husband

    Joined:
    Apr 14, 2004
    Messages:
    28,284
    Location:
    Mayfield
    Ratings:
    +8,642
    It's the dreaded Mewa virus...
  22. Ward

    Ward A Stepford Husband

    Joined:
    Apr 14, 2004
    Messages:
    28,284
    Location:
    Mayfield
    Ratings:
    +8,642
    And, interestingly enough, just got a note from corporate saying they were pushing out McAfee soon.
  23. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Found 53 items, deleted them, aaaand didn't solve the ad popups. :(
    These things are immortal!
  24. Zenow

    Zenow Treehugger

    Joined:
    Mar 28, 2004
    Messages:
    4,081
    Location:
    Netherlands
    Ratings:
    +897
    Immoral's more like it.
    I've heard good things about Kaspersky's virusscanner finding stuff other programs miss. They've got an online scanner here. It requires using Internet Explorer to scan though. Worth a shot I guess.
  25. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Okay, you're just messing with me, right? I tried that and all I could get it to do was search for its own updates. Even after I let it load its updates, it wouldn't let me run the program until I let it search for more updates. And again, and again, and.... :bang: That's even more frustrating than the virus!
  26. Nautica

    Nautica Probably a Dual

    Joined:
    Aug 10, 2005
    Messages:
    11,555
    Location:
    St. Louis
    Ratings:
    +6,504
    SpySweeper works well for me, especially in conjunction w/ Norton Internet Security (although I've nothing against other Anitvirus s/w).
  27. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Holy poo, I think SpySweeper did it!!!
    :blow:
    So far so good, anyway. Been on for ten minutes and no ads.

    Thanks, Nautica!
  28. mustang

    mustang Fresh Meat

    Joined:
    Mar 7, 2007
    Messages:
    124
    Ratings:
    +12
  29. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Okay, I think we're golden. Been online for an hour and a half with no unwelcome eruptions. WOOHOO!!
  30. Forbin

    Forbin Do you feel fluffy, punk?

    Joined:
    Mar 27, 2004
    Messages:
    43,616
    Location:
    All in your head
    Ratings:
    +30,540
    Hmm. Something just now TRIED to pop up, but SpySweeper blocked it and let me know. To me this says I still have a problem. My goal is for NOTHING to happen at all.